Covenant Surgical Partners, Inc. has experienced a major data breach. The cybersecurity incident was reported to the U.S. Department of Health and Human Services on May 28, 2025, disclosing that 88,609 individuals have been affected.
Federal law requires HHS notification if protected health information (PHI) is involved in a cybersecurity incident or data breach of any kind. Compromised information may include names and contact details, dates of birth, medical records, insurance information, payment information, and other health-related data.
Covenant Surgical Partners rebranded as Covenant Physicians Partners and partnered with Texas Eyecare Network in 2020. Covenant Physicians Partners was acquired by United Surgical Partners International (USPI) in 2024. USPI is a subsidiary of Tenet Health.
In addition to the Health and Human Services disclosure, Covenant Surgical Partners will work to identify and notify affected individuals with the data breach details.
If you believe your personal or protected health information may have been compromised in this breach:
For more information about the company and its services, visit the United Surgical Partners International website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.